THE FINE PRINT / YOUR DATA
PRIVACY
POLICY.
Effective October 17, 2026
This policy explains how PIRL Social, Inc. (“we”) handles information when you use Michael Medrano’s International Male photo booth at internationalmale.vercel.app. For privacy questions or requests, email info@pirl.social.
Your photo and saved pass
Your original photo is opened and edited in your browser. Before check-in, previews and photo downloads stay on your device. After a successful check-in, we upload and privately store the finished boarding-pass image, including the photo you chose and the passenger details printed on the pass. We do not separately store your original photo. You can upload a different photo to replace the saved pass image. If you share or download a pass, the destination you choose may handle it under its own terms.
Information we collect
In preview mode, the details you enter are used in your browser to draw a pass and are not saved by us. When saved check-in is available, we collect your display name, normalized email address, departure city and airport code; assign a passenger number and seat; and record check-in time, link attribution such as UTM tags, and your separate optional marketing choice with its wording and time. If you claim a track, we store your current choice and claim timestamps and show only aggregate track counts publicly. We record whether an optional confirmation email was accepted for delivery.
We issue a private return link for a saved pass. Its random token is stored in our database only as a hash and expires after seven days. Your browser also receives a secure, HTTP-only cookie so you can recover the pass on the same device. You may set an optional password from a verified passenger session; we store a salted password hash, never the password itself. Email-and-password sign-in issues a new seven-day return session and replaces the previous return link. Anyone with a currently valid private link can view the saved pass image and details, including its photo, so keep it private. Your email address does not appear on the pass. Older check-ins without a saved image can recreate a pass from their saved details and add a photo.
When passenger storage is configured, we count basic photo booth actions in daily totals and use an hourly hash derived from the request IP address for abuse control. Ordinary hosting logs may contain technical request information, including IP address and browser details.
How we use it
We use saved check-in details to create your boarding pass and luggage tag, recover your seat and track claim with a valid return link, browser session, or optional password, send an optional confirmation, and provide support. Campaign participation does not require marketing consent. If you check the optional marketing box, we record that preference separately; this site currently sends no marketing messages. You can withdraw that permission by emailing us. We use aggregate counts to understand whether the experience works and temporary technical information to protect it.
Service providers and sharing
Vercel hosts this site. The dedicated Supabase project stores saved passenger check-ins and finished pass images. If confirmation emails are enabled, Resend processes your email address to deliver a private return link. These providers may process information in other countries. We do not sell your personal information or share it for cross-context behavioral advertising. We may disclose information if required by law or to protect the site and its users.
How long we keep it
When saved check-in is enabled, we keep passenger, pass-image, and consent records while needed to fulfill your request, honor your choices, and meet legal obligations. Replacing your pass overwrites its prior image. We delete or de-identify information when those purposes end, or after a valid deletion request unless a legal reason requires us to retain it. Return links expire after seven days, and abuse-control hashes expire after one hour.
Your choices and rights
Marketing is optional and unchecked by default. To ask what information we hold about you, request a copy, correct it, delete it, or withdraw consent, email info@pirl.social. We may need to verify your identity before responding. Depending on where you live, you may also have the right to object to or restrict some processing, or to complain to a privacy regulator. We will respond as required by applicable law.
Children and changes
This site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child submitted information, contact us so we can review and remove it. We may update this policy as the campaign changes; the effective date above will show when we last revised it. Material changes to how signup information is used will be disclosed before they take effect.